CVE-2024-47939
7.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L
Summary
Stack-based buffer overflow vulnerability exists in multiple laser printers and MFPs which implement Ricoh Web Image Monitor. If this vulnerability is exploited, receiving a specially crafted request created and sent by an attacker may lead to arbitrary code execution and/or a denial-of-service (DoS) condition. As for the details of affected product names and versions, refer to the information provided by the vendors under [References].
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Ricoh Company, Ltd. | Multiple laser printers and MFPs which implement Web Image Monitor | see the information provided by the vendor | affected |
| KONICA MINOLTA, INC. | Multiple MFPs which implement Web Image Monitor | see the information provided by the vendor | affected |
Weaknesses
- CWE-121: Stack-based buffer overflow
ADP Enrichment
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: yes
- Technical Impact: total
References
- https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2024-000011
- https://jp.ricoh.com/security/products/vulnerabilities/vul?id=ricoh-2024-000011
- https://www.konicaminolta.jp/business/support/important/250519_01_01.html
- https://jvn.jp/en/jp/JVN87770340/
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.